Upgrade to Pro — share decks privately, control downloads, hide ads and more …

EASM mistakes waiting to happen

Avatar for JR0ch17 JR0ch17
January 25, 2022
Technology
62
0

EASM mistakes waiting to happen

Avatar for JR0ch17

JR0ch17

January 25, 2022

More Decks by JR0ch17

See All by JR0ch17
Traversing my way in the internal network
Avatar for JR0ch17 jr0ch17
0
190
Getting Started in Bug Bounty
Avatar for JR0ch17 jr0ch17
0
180
Getting Blindly Lucky
Avatar for JR0ch17 jr0ch17
0
110
Qu'est-ce que le bug bounty?
Avatar for JR0ch17 jr0ch17
0
170
Finding 5 bugs in a single parameter
Avatar for JR0ch17 jr0ch17
0
130
Beyond the Borders of Scope
Avatar for JR0ch17 jr0ch17
1
110
Bad API, hAPI Hackers!
Avatar for JR0ch17 jr0ch17
0
1.6k

Other Decks in Technology

See All in Technology
[ホンマでっか SRE] あなたはなぜ SRE に?
Avatar for _awache _awache
0
160
みてねにおけるAI-DLC導入活動とAIドリブン開発の現在地/JAWS-UG AI-DLC #2
Avatar for Isao Shimizu isaoshimizu
2
160
Android skills に学ぶ
Avatar for kokiko kokiko
0
180
Oracle MCP Servers Explained
Avatar for thatjeffsmith thatjeffsmith
1
510
わたしが知り合いゼロの勉強会に 行けるようになるまで
Avatar for R-524 r5ni4
2
800
三人寄ればチューリング完全
Avatar for Takumi Sueda puhitaku
6
3.2k
形式手法特論：Hyperproperty とモデル検査 #kernelvm / Kernel VM Study Tokyo 19th
Avatar for y_taka_23 ytaka23
0
810
AWS Blocks が楽しい #ゆるWeb札幌
Avatar for Kihara, Takuya tacck
PRO
0
150
NANDでも描画したい！
Avatar for nichica nichica906
3
730
AIに持続⼒を与える 判断の⻑期記憶設計
Avatar for eiei114 eiei114
1
710
GopherCon @シアトル に行ってきました
Avatar for Takuto Nagami logica0419
0
270
internal/testlog で遊ぼう
Avatar for rokuosan rokuosan
0
220

Featured

See All Featured
What does AI have to do with Human Rights?
Avatar for Per Axbom axbom
PRO
1
2.3k
How to Ace a Technical Interview
Avatar for Jacob Kaplan-Moss jacobian
281
24k
Ethics towards AI in product and experience design
Avatar for Skipper Chong Warson skipperchong
2
350
Leadership Guide Workshop - DevTernity 2021
Avatar for David Neal reverentgeek
1
340
Marketing to machines
Avatar for Jono Alderson jonoalderson
1
5.7k
How to make the Groovebox
Avatar for あそなす asonas
2
2.3k
The Straight Up "How To Draw Better" Workshop
Avatar for Dennis Kardys denniskardys
239
140k
Visualization
Avatar for Eitan Lees eitanlees
152
17k
Site-Speed That Sticks
Avatar for Harry Roberts csswizardry
13
1.5k
How to Get Subject Matter Experts Bought In and Actively Contributing to SEO & PR Initiatives.
Avatar for Liv Day livdayseo
0
180
AI: The stuff that nobody shows you
Avatar for John Nunemaker jnunemaker
PRO
9
940
End of SEO as We Know It (SMX Advanced Version)
Avatar for Michael King ipullrank
3
4.4k

Transcript

  1. EASM mistakes waiting to happen

  2. GET /whoami HTTP/2 Jasmin Landry JR0ch17 Lead, IT & Security

    at Montreal Canadiens fan

  3. GET /agenda HTTP/2 EASM Common mistakes Hacker perspective

  4. GET /EASM HTTP/2 What exactly is EASM? What does it

    cover? Why is it important?

  5. GET /common_mistakes HTTP/2 Lack of Change Management Not respecting Least

    Privilege Misconfigured WAFs Cloud misconfigs (S3 buckets)

  6. GET /hacker_perspective HTTP/2 • Subdomains • IPs • TLS certificates

    • Third-party apps Recon EVERYTHING • Monitor for new assets • Monitor any change Continuous Monitoring

  7. GET /thanks HTTP/2 Thank you for listening Questions? More questions?

    DMs are open on and